Kapil Agrawal
@netops2devops.net
Kubernetes platform Security Engineer by profession. Also a recovering network engineer. Open source exuberant. Fan of open standards. Spends way too much time in homelab
Reposted by Kapil Agrawal
Case study: ESnet’s success with Cilium demonstrates that IPv6-only Kubernetes deployments are not only viable, but also work exceptionally well at government scale. This has provided a blueprint for other national laboratories facing similar mandates.
Read more: www.cncf.io/case-studies...
Read more: www.cncf.io/case-studies...
ESnet (Energy Sciences Network)
ESnet, the data circulatory system for the U.S. Department of Energy faced high operational overhead from running individual VMs for a single containerized application with no unified observability…
www.cncf.io
October 31, 2025 at 2:02 PM
Case study: ESnet’s success with Cilium demonstrates that IPv6-only Kubernetes deployments are not only viable, but also work exceptionally well at government scale. This has provided a blueprint for other national laboratories facing similar mandates.
Read more: www.cncf.io/case-studies...
Read more: www.cncf.io/case-studies...
What's been sitting in my Obsidian notes for over a year now, I finally took the time to put it up on my blog. I have a few more blog posts coming up as part of this series. #kubernetes #ipv6 #cilium
netops2devops.net/series/kuber...
netops2devops.net/series/kuber...
Kubernetes in IPv6 Only Networks
netops2devops.net
October 25, 2025 at 5:19 PM
What's been sitting in my Obsidian notes for over a year now, I finally took the time to put it up on my blog. I have a few more blog posts coming up as part of this series. #kubernetes #ipv6 #cilium
netops2devops.net/series/kuber...
netops2devops.net/series/kuber...
Join ESnet's Kapil Agrawal at #CiliumCon to hear how his team built an IPv6-first #Kubernetes environment using #Cilium for networking.
Expect lessons learned on routing, scaling, and simplifying operations from deploying without IPv4.
🔗 colocatedeventsna2025.sched.com/event/28D0g/...
Expect lessons learned on routing, scaling, and simplifying operations from deploying without IPv4.
🔗 colocatedeventsna2025.sched.com/event/28D0g/...
October 24, 2025 at 1:06 AM
the new @golang.org 1.25.3 release does not seem to be available on MacOS via Homebrew yet? 🤔
October 15, 2025 at 7:49 PM
the new @golang.org 1.25.3 release does not seem to be available on MacOS via Homebrew yet? 🤔
I enjoyed reading the first few chapters in antonz.org/go-concurren... so much that I ended up purchasing the eBook 😁 It's just $10 which is a small token of appreciation for all that @antonz.org gives to the #go community for free! Plus now I get to solve all the exercises in the book. 😋
Gist of Go: Concurrency
Interactive book on concurrent programming with many exercises.
antonz.org
October 15, 2025 at 2:34 AM
I enjoyed reading the first few chapters in antonz.org/go-concurren... so much that I ended up purchasing the eBook 😁 It's just $10 which is a small token of appreciation for all that @antonz.org gives to the #go community for free! Plus now I get to solve all the exercises in the book. 😋
A couple of awesome resources which I came across as I was learning concurrency patterns in #go
1. Gist of Go by @antonz.org
antonz.org/go-concurren...
2. Interactive guide to concurrency patterns by Richard Chukwu
concurrency.rocks
1. Gist of Go by @antonz.org
antonz.org/go-concurren...
2. Interactive guide to concurrency patterns by Richard Chukwu
concurrency.rocks
Gist of Go: Concurrency
Interactive book on concurrent programming with many exercises.
antonz.org
October 5, 2025 at 4:20 AM
A couple of awesome resources which I came across as I was learning concurrency patterns in #go
1. Gist of Go by @antonz.org
antonz.org/go-concurren...
2. Interactive guide to concurrency patterns by Richard Chukwu
concurrency.rocks
1. Gist of Go by @antonz.org
antonz.org/go-concurren...
2. Interactive guide to concurrency patterns by Richard Chukwu
concurrency.rocks
I have never been a professional C/C++ programmer by trade and maybe that's why I don't understand this but after doing some beginner level exercises with #rust I don't get all the fuss around how borrower/checker rules make it complicated. Sure, it feels lot more verbose. Even more than #go
October 3, 2025 at 5:28 AM
Critical thinking, curiosity and the drive to go deeper into the stack to learn something in & out appears to be diminishing as engineers become more dependent on AI generated content.
People who were once "engineers" are now becoming "operators"
People who were once "engineers" are now becoming "operators"
September 25, 2025 at 5:46 PM
Critical thinking, curiosity and the drive to go deeper into the stack to learn something in & out appears to be diminishing as engineers become more dependent on AI generated content.
People who were once "engineers" are now becoming "operators"
People who were once "engineers" are now becoming "operators"
For anyone using or interested in running @cilium.io as standalone NAT46x64Gateway I have updated my blog post for the latest cilium v1.18.x releases.
netops2devops.net/posts/cilium...
netops2devops.net/posts/cilium...
Using Cilium as a standalone NAT46x64Gateway
netops2devops.net
September 20, 2025 at 2:10 AM
For anyone using or interested in running @cilium.io as standalone NAT46x64Gateway I have updated my blog post for the latest cilium v1.18.x releases.
netops2devops.net/posts/cilium...
netops2devops.net/posts/cilium...
📣 New Blog Post
Apparently, there are a few gotcha's when trying to checkpoint a running pod in #k3s which I learnt the hard way. I documented my findings in the blog post. #criu #kubernetes #forensics
netops2devops.net/posts/checkp...
Apparently, there are a few gotcha's when trying to checkpoint a running pod in #k3s which I learnt the hard way. I documented my findings in the blog post. #criu #kubernetes #forensics
netops2devops.net/posts/checkp...
Container Checkpointing in K3s for Forensics
netops2devops.net
September 14, 2025 at 9:39 PM
📣 New Blog Post
Apparently, there are a few gotcha's when trying to checkpoint a running pod in #k3s which I learnt the hard way. I documented my findings in the blog post. #criu #kubernetes #forensics
netops2devops.net/posts/checkp...
Apparently, there are a few gotcha's when trying to checkpoint a running pod in #k3s which I learnt the hard way. I documented my findings in the blog post. #criu #kubernetes #forensics
netops2devops.net/posts/checkp...
Whoever created #hubble for @cilium.io @isovalent.bsky.social should be given a gold medal. You have my utmost respect 🫡 Debugging Kubernetes networking issues has never been this easy.
August 29, 2025 at 4:54 AM
Whoever created #hubble for @cilium.io @isovalent.bsky.social should be given a gold medal. You have my utmost respect 🫡 Debugging Kubernetes networking issues has never been this easy.
Reposted by Kapil Agrawal
The schedule for #CiliumCon is live! It features talks and end user stories on IPv6, #Cilium Mesh, DNS in #eBPF from companies like Microsoft, SeatGeek, ESnet, and more.
Register now and join the community Nov 10 in Atlanta during #KubeCon NA: colocatedeventsna2025.sched.com/overview/typ...
Register now and join the community Nov 10 in Atlanta during #KubeCon NA: colocatedeventsna2025.sched.com/overview/typ...
August 15, 2025 at 1:45 PM
The schedule for #CiliumCon is live! It features talks and end user stories on IPv6, #Cilium Mesh, DNS in #eBPF from companies like Microsoft, SeatGeek, ESnet, and more.
Register now and join the community Nov 10 in Atlanta during #KubeCon NA: colocatedeventsna2025.sched.com/overview/typ...
Register now and join the community Nov 10 in Atlanta during #KubeCon NA: colocatedeventsna2025.sched.com/overview/typ...
Reposted by Kapil Agrawal
CiliumCon schedule is out now
From IPv6 only at ESNet to parsing DNS in eBPF at Microsoft to combining Cilium, Hubble, and Tetragon at Google to getting a service mesh into production in 90 days at SeatGeek
colocatedeventsna2025.sched.com/overview/typ...
From IPv6 only at ESNet to parsing DNS in eBPF at Microsoft to combining Cilium, Hubble, and Tetragon at Google to getting a service mesh into production in 90 days at SeatGeek
colocatedeventsna2025.sched.com/overview/typ...
CiliumCon Schedule
colocatedeventsna2025.sched.com
August 14, 2025 at 10:32 AM
CiliumCon schedule is out now
From IPv6 only at ESNet to parsing DNS in eBPF at Microsoft to combining Cilium, Hubble, and Tetragon at Google to getting a service mesh into production in 90 days at SeatGeek
colocatedeventsna2025.sched.com/overview/typ...
From IPv6 only at ESNet to parsing DNS in eBPF at Microsoft to combining Cilium, Hubble, and Tetragon at Google to getting a service mesh into production in 90 days at SeatGeek
colocatedeventsna2025.sched.com/overview/typ...
After struggling with embedding Rego inside YAML on top of having to write constraint template, then a constraint file just to create 1 basic admission policy, I am switching teams from #Gatekeeper to #Kyverno and as it turns out ..
August 3, 2025 at 2:45 AM
After struggling with embedding Rego inside YAML on top of having to write constraint template, then a constraint file just to create 1 basic admission policy, I am switching teams from #Gatekeeper to #Kyverno and as it turns out ..
The nano textured display with a slight matte finish on the new MacBook Pro laptops is just 🔥 Totally worth the $$$
July 28, 2025 at 1:06 AM
The nano textured display with a slight matte finish on the new MacBook Pro laptops is just 🔥 Totally worth the $$$
#Kubernetes tends to seem more complex from the outside than it truly is once you realize it's just an API server managing the infra.
June 18, 2025 at 8:17 PM
#Kubernetes tends to seem more complex from the outside than it truly is once you realize it's just an API server managing the infra.
I am really starting to appreciate how @openpolicyagent.bsky.social docs have been re-organized in the recent update!
June 15, 2025 at 7:36 PM
I am really starting to appreciate how @openpolicyagent.bsky.social docs have been re-organized in the recent update!
Upcoming changes in #Cilium 1.18.0 will bring significant improvements for operating #Kubernetes in #IPv6 only networks! One big ticket item is that now you can use the default tunnel mode with an IPv6 only underlay. I shared my configs in GitHub issue comments github.com/cilium/ciliu...
Support tunneling over IPv6 · Issue #17240 · cilium/cilium
Bug report Hello. First of all, thank you for an amazing product. I am trying to configure an IPv6 only kubernetes network(, which means that all the interfaces on my node are not given ipv4 addres...
github.com
May 26, 2025 at 12:40 AM
Upcoming changes in #Cilium 1.18.0 will bring significant improvements for operating #Kubernetes in #IPv6 only networks! One big ticket item is that now you can use the default tunnel mode with an IPv6 only underlay. I shared my configs in GitHub issue comments github.com/cilium/ciliu...
While #Cilium is most commonly used as a CNI, not much has been documented about its capabilities outside of #Kubernetes, specially as a standalone NAT46x64 gateway for #IPv6 only networks. netops2devops.net/posts/cilium...
Using Cilium as a standalone NAT46x64Gateway
IPv4 and IPv6 are two different protocols they are incompatible with one another i.
netops2devops.net
May 1, 2025 at 8:29 PM
While #Cilium is most commonly used as a CNI, not much has been documented about its capabilities outside of #Kubernetes, specially as a standalone NAT46x64 gateway for #IPv6 only networks. netops2devops.net/posts/cilium...
I've been learning some concurrency in #Go using goroutines so I wrote a really dumb program that launches a workerpool to clone all publicly available repositories of an organization from Github. The obvious natural step next is to feed those repos to a secret scanning tool such as #gitleaks 😂
April 18, 2025 at 12:50 AM
Most engineers who level up and eventually become executives usually drift away from their engineering grassroots as they become less hands on and focus more on business. But then there are people like Mitchell Hashimoto who still enjoy getting into the weeds and for that he has my respect 🫡
April 13, 2025 at 5:57 AM
Most engineers who level up and eventually become executives usually drift away from their engineering grassroots as they become less hands on and focus more on business. But then there are people like Mitchell Hashimoto who still enjoy getting into the weeds and for that he has my respect 🫡
As someone new to #Golang (who is still very much learning) so far I have gotten a LOT of value from www.practical-go-lessons.com After reading almost half of the ebook online (for free) I started felt guilty and ended up purchasing the e-Book. Totally worth it in my opinion.
Practical Go Lessons
www.practical-go-lessons.com
April 9, 2025 at 4:41 AM
As someone new to #Golang (who is still very much learning) so far I have gotten a LOT of value from www.practical-go-lessons.com After reading almost half of the ebook online (for free) I started felt guilty and ended up purchasing the e-Book. Totally worth it in my opinion.